Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabe5f0a-b07f-4774-8e43-2884178254ff.roa
File:                     eabe5f0a-b07f-4774-8e43-2884178254ff.roa (raw, json)
Hash identifier:          ZnDAqcHJyhWvEjcC+9ZNMH7AUs7td7R7ZsTHt+nen78=
Subject key identifier:   E2:22:2B:74:A3:9D:67:27:37:A9:AE:A3:DA:FF:8A:8B:D8:0C:C3:74
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       045D7857F7CF70D9434F6754540702480AEE056E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabe5f0a-b07f-4774-8e43-2884178254ff.roa
Signing time:             Mon 05 May 2025 15:11:38 +0000
ROA not before:           Mon 05 May 2025 15:11:38 +0000
ROA not after:            Mon 09 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff9::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5d:78:57:f7:cf:70:d9:43:4f:67:54:54:07:02:48:0a:ee:05:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  5 15:11:38 2025 GMT
            Not After : Jun  9 23:59:59 2025 GMT
        Subject: serialNumber=fa34140d744d8a6f25c81d574e54ab2e7f00fbd0ba7dab562efd0ff3fb8c9da7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:ca:89:54:bc:d3:a0:a4:54:53:56:b9:2c:
                    f6:69:c2:af:09:c2:af:30:cc:e8:d9:7b:a9:3c:f7:
                    2c:a6:74:7d:f9:43:35:82:fc:ba:2c:b3:89:d5:74:
                    56:52:1d:67:7d:19:f7:13:91:f6:d4:67:85:8e:43:
                    cf:7e:27:37:6f:ac:b1:c1:06:6a:17:2e:42:91:14:
                    74:13:3b:67:91:07:d9:e3:b9:4e:2d:ef:18:e9:cd:
                    eb:b8:bd:dd:2d:21:7b:c2:2f:de:a8:ec:8c:fd:88:
                    92:6f:ee:e3:e0:16:d4:06:58:f6:f0:fc:63:7f:38:
                    98:0e:20:d7:70:b5:fd:ad:c4:c8:29:ef:25:2a:0c:
                    99:1e:d9:66:e8:3c:23:dd:91:ab:0d:f8:b8:ef:17:
                    2d:7e:c1:86:66:04:ab:8c:36:3f:67:7f:76:b5:4b:
                    ac:b4:3a:8b:2c:f3:ae:0c:77:f1:78:73:a9:47:52:
                    fd:7a:2a:d2:6d:d1:36:90:66:e3:c8:a6:c4:7a:49:
                    ac:d5:f1:3a:88:07:97:48:6b:9e:7e:55:2f:d3:15:
                    fa:9e:31:85:10:ce:5a:b8:15:50:e6:d7:de:2f:37:
                    73:e7:26:bd:e0:27:25:9e:a7:53:1e:f6:eb:21:04:
                    ae:5f:83:2b:27:8b:80:b6:1a:43:92:37:f6:97:b4:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:2B:74:A3:9D:67:27:37:A9:AE:A3:DA:FF:8A:8B:D8:0C:C3:74
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eabe5f0a-b07f-4774-8e43-2884178254ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:22:1e:02:53:57:c6:30:ee:dd:0d:e2:2c:dd:fe:c6:1c:
         25:f9:a1:84:58:1f:d6:0b:89:a3:e7:2d:39:c7:aa:94:fb:0a:
         45:3e:2c:81:e6:4b:52:b6:fc:d4:a8:d3:f9:92:63:66:68:8a:
         ae:93:3f:54:3a:4d:b2:d2:9e:34:01:62:00:89:25:27:d4:22:
         18:68:c7:43:23:df:5b:64:71:a3:2f:a4:fe:c0:e3:91:d1:77:
         5f:38:c4:bc:42:1b:63:1d:b8:39:7e:f1:f1:6f:82:30:a4:fe:
         7c:03:a8:bb:47:b5:a7:4c:9e:03:b7:55:43:49:81:13:7f:f0:
         e7:1f:05:d6:3a:c9:0b:c1:d1:18:3f:b0:98:c9:f6:22:66:4a:
         e8:f2:ae:24:55:33:83:00:8e:36:a0:35:98:06:b6:89:fd:d2:
         cb:4e:2b:eb:06:f1:5f:39:4c:dc:56:2f:b0:44:9a:49:28:62:
         51:76:0a:6b:19:b5:2b:4f:94:71:9d:44:8c:5f:42:96:84:1b:
         93:b3:17:b6:99:7d:da:49:a3:8c:ea:38:61:68:f1:7a:35:f9:
         3a:f6:37:d9:69:cd:fd:bd:f6:4b:ec:63:b5:6f:15:89:16:0b:
         ce:07:c7:52:d4:c2:1b:f9:af:1b:6e:33:e8:a6:fa:98:e6:2c:
         76:cd:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:16:16 2025 by rpki-client